CVEs published in December 2015
662 vulnerabilities, 198 critical, 4 exploited.
- zyxel gs1900-10hp firmware Cross-site request forgery (CSRF) vulnerability on Belkin F9K1102 2 devices with firmware 2.10.17... 8.8 High
- zyxel gs1900-10hp firmware Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for... 9.8 Critical
- zyxel gs1900-10hp firmware The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank... 9.8 Critical
- zyxel gs1900-10hp firmware Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID... 8.6 High
- ibm infosphere biginsights Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0,... 7.4 High
- ibm websphere portal IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0... 5.3 Medium
- zyxel nbg-418n, nbg-418n firmware +1 more Cross-site request forgery (CSRF) vulnerability on ZyXEL NBG-418N devices with firmware 1.00(AADZ... 8.0 High
- zyxel nbg-418n firmware The web administration interface on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 has a... 8.1 High
- readynet solutions wrt300n-dd, wrt300n-dd firmware +1 more ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS... 5.8 Medium
- readynet solutions wrt300n-dd firmware Cross-site request forgery (CSRF) vulnerability on ReadyNet WRT300N-DD devices with firmware 1.0... 8.8 High
- readynet solutions wrt300n-dd firmware The web administration interface on ReadyNet WRT300N-DD devices with firmware 1.0.26 has a... 9.8 Critical
- ampedwireless r10000 firmware Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the... 5.3 Medium
- ampedwireless r10000 firmware Cross-site request forgery (CSRF) vulnerability on Amped Wireless R10000 devices with firmware 2... 8.8 High
- ampedwireless r10000 firmware The web administration interface on Amped Wireless R10000 devices with firmware 2.5.2.11 has a... 9.8 Critical
- zyxel pmg5318-b20a firmware ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 allow remote authenticated users to obtain... 8.0 High
- zyxel pmg5318-b20a firmware The management portal on ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 does not terminate... 8.5 High
- zyxel pmg5318-b20a firmware The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2... 9.8 Critical
- zyxel p-660hw-t1 v2 firmware Multiple cross-site scripting (XSS) vulnerabilities in Forms/rpAuth_1 on ZyXEL P-660HW-T1 2... 6.1 Medium
- zyxel nbg-418n, zynos firmware, pmg5318-b20a firmware +2 more ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1... 9.8 Critical
- mediabridge medialink mwn-wapr300n firmware Cross-site request forgery (CSRF) vulnerability on Mediabridge Medialink MWN-WAPR300N devices... 8.8 High
- tenda n3 wireless n150, mediabridge medialink mwn-wapr300n firmware +1 more Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150... 9.8 Critical
- mediabridge medialink mwn-wapr300n firmware The web management interface on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50... 6.8 Medium
- orientdb OrientDB Studio web management interface is vulnerable to clickjacking attacks 6.1 Medium
- orientdb OrientDB Server Community Edition uses insufficiently random values to generate session IDs 5.9 Medium
- orientdb OrientDB-Server vulnerable to Cross-Site Request Forgery 8.8 High
- idera uptime infrastructure monitor The up.time client in Idera Uptime Infrastructure Monitor through 7.6 allows remote attackers to... 5.3 Medium
- idera uptime infrastructure monitor Buffer overflow in the up.time client in Idera Uptime Infrastructure Monitor 7.4 might allow... 7.3 High
- idera uptime infrastructure monitor Format string vulnerability in the up.time client in Idera Uptime Infrastructure Monitor 6.0 and... 5.3 Medium
- seagate wireless mobile storage, wireless plus mobile storage, lacie lac9000436u firmware +2 more +4 more Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile... 8.8 High
- seagate wireless mobile storage, wireless plus mobile storage, lacie lac9000436u firmware +2 more +4 more Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile... 7.5 High
- seagate wireless mobile storage, wireless plus mobile storage, lacie lac9000436u firmware +2 more +4 more Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage,... 9.8 Critical
- toshiba 4690 operating system Toshiba 4690 Operating System 6 Release 3, when the ADXSITCF logical name is not properly... 3.7 Low
- pacom rtu gms, 1000 ccu gms +1 more Pacom 1000 CCU and RTU GMS devices allow remote attackers to spoof the controller-to-base data... 7.5 High
-
ia32-libsDebian ia32-libs - security update No score - canonical ubuntu linux, debian linux, freeradius pam radius +2 more add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the... 7.5 High
- gnu glibc Integer overflow in the strxfrm function in the GNU C Library (aka glibc or libc6) before 2.21... 8.1 High
- gnu libidn, canonical ubuntu linux, opensuse leap +1 more +3 more idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information... 7.5 High
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 more The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and... 5.5 Medium
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 more Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar... 5.5 Medium
- libarchive, canonical ubuntu linux, debian linux +3 more +5 more The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before... 5.5 Medium
- libarchive, canonical ubuntu linux, debian linux +3 more +5 more Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in... 7.8 High
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 more bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite... 7.5 High
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 more The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0... 5.5 Medium
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 more The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive... 5.5 Medium
- libarchive, canonical ubuntu linux, suse linux enterprise desktop +2 more +4 more The readline function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows... 5.5 Medium
- libarchive, canonical ubuntu linux, novell suse linux enterprise desktop +2 more +4 more The archive_read_format_tar_read_header function in archive_read_support_format_tar.c in... 5.5 Medium
- libarchive, canonical ubuntu linux, novell suse linux enterprise desktop +2 more +4 more The process_extra function in libarchive before 3.2.0 uses the size field and a signed number in... 6.5 Medium
- libarchive, canonical ubuntu linux, novell suse linux enterprise desktop +3 more +5 more The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0... 5.5 Medium
- libarchive, canonical ubuntu linux, novell suse linux enterprise desktop +2 more +4 more The ae_strtofflags function in archive_entry.c in libarchive before 3.2.0 allows remote attackers... 7.5 High
- libarchive, canonical ubuntu linux, novell suse linux enterprise desktop +2 more +4 more The _ar_read_header function in archive_read_support_format_ar.c in libarchive before 3.2.0... 5.5 Medium
- Show olderLoading…